Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/krjZYFDiEc9NCoYnp6QNSiVdlh4.roa
File: krjZYFDiEc9NCoYnp6QNSiVdlh4.roa (raw, json)
Hash identifier: W4kDPLN/h1WfwMfIN7RKI6aimNamCJOQ+M0GYj3Yz+o=
Subject key identifier: 92:B8:D9:60:50:E2:11:CF:4D:0A:86:27:A7:A4:0D:4A:25:5D:96:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D7F0FE299DFE3F616565A40FC21565B1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/krjZYFDiEc9NCoYnp6QNSiVdlh4.roa
Signing time: Thu 27 Mar 2025 14:10:49 +0000
ROA not before: Thu 27 Mar 2025 14:10:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.39.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 04:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:f0:fe:29:9d:fe:3f:61:65:65:a4:0f:c2:15:65:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 27 14:10:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92b8d96050e211cf4d0a8627a7a40d4a255d961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:b5:14:df:17:ce:38:6d:49:e5:b3:d3:b1:
64:18:5f:a4:ea:c6:46:4b:a8:d3:23:a6:63:82:a7:
50:ed:34:f4:45:8a:c2:38:59:46:40:a8:ea:79:13:
ea:e1:61:09:24:eb:24:0f:5e:e2:ea:15:35:cc:60:
7a:b3:93:94:fc:ef:a4:ee:4d:e1:11:b1:e5:3e:bc:
58:af:59:a1:8b:ea:a3:b1:4e:d2:1b:d6:eb:03:39:
d8:c3:ee:93:a3:03:46:08:38:9c:be:19:98:4e:aa:
f3:81:3b:1f:29:de:a0:3e:47:cd:43:c8:08:28:b6:
48:6a:5c:4d:3a:1b:6c:23:9e:32:bf:62:46:ae:2c:
92:0c:52:18:84:57:dc:31:f9:2a:8b:e8:bd:70:4d:
22:d3:09:1f:e4:a8:5c:6f:e6:c7:7a:35:86:2a:03:
31:16:dd:d6:5f:9b:45:a9:4e:bf:71:91:c8:3c:00:
bb:0b:95:9c:2b:68:c1:67:2d:3d:89:fc:da:58:4f:
f1:c6:86:21:54:ac:89:c2:33:12:37:7f:59:a2:f4:
ae:d0:69:e7:83:63:ca:3b:d9:90:6d:d3:41:6c:03:
b2:28:b3:30:48:4e:ba:be:13:c2:84:05:5a:c1:e5:
76:6f:cd:c1:fe:56:0e:12:ae:90:1e:7f:2d:38:e3:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:D9:60:50:E2:11:CF:4D:0A:86:27:A7:A4:0D:4A:25:5D:96:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/krjZYFDiEc9NCoYnp6QNSiVdlh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.238.0/24
5.231.61.0/24
5.231.79.0/24
85.93.5.0/24
85.93.31.0/24
89.144.5.0/24
89.144.11.0/24
89.144.17.0-89.144.18.255
89.144.39.0/24
94.249.168.0/23
94.249.214.0/24
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
52:95:e5:ba:1f:91:54:c9:43:23:e3:a1:80:af:a0:70:da:e6:
e5:4f:db:c4:4f:ad:4f:a7:13:e1:0b:d6:2d:6d:ea:2a:03:e7:
2b:3b:48:64:13:8b:f8:8c:5b:f6:a8:46:8d:a5:78:a0:84:e6:
e9:90:35:0a:3e:a7:a7:5d:ed:a7:cb:53:7f:19:49:1e:86:e2:
3e:a7:68:2b:8e:90:40:29:99:5e:46:15:ca:2f:59:06:dc:90:
68:7f:5b:e3:fb:05:cb:a7:9a:6d:96:a9:1b:89:d8:d9:a7:57:
fc:28:6f:c1:d3:d7:e1:b0:c0:69:72:3f:5f:d1:73:23:05:38:
46:3d:2c:5f:cd:9c:37:ec:73:22:90:f8:e9:7d:3d:0f:90:77:
73:ca:ae:64:94:f8:83:90:e6:91:d1:ec:2e:e8:22:97:09:f9:
6c:c1:d2:b1:52:84:3a:ef:e4:f7:7d:c4:7f:fa:d2:70:9c:d8:
84:1c:c4:f8:95:eb:0a:72:9f:e6:09:ce:00:ab:fb:e4:88:ca:
9a:2d:f5:1b:1d:eb:09:22:72:4f:64:31:51:70:89:05:f5:56:
84:ac:5f:16:c0:27:38:2b:97:e8:50:60:98:a4:35:d4:d6:89:
d3:6f:d4:52:4a:0d:7a:28:5f:60:4e:2b:1a:41:bf:3f:2e:ce:
83:84:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:21 2025 by rpki-client